•••*****•*•••••• 


Disclosure  to  Promote  the  Right  To  Information 


Whereas  the  Parliament  of  India  has  set  out  to  provide  a  practical  regime  of  right  to 
information  for  citizens  to  secure  access  to  information  under  the  control  of  public  authorities, 
in  order  to  promote  transparency  and  accountability  in  the  working  of  every  public  authority, 
and  whereas  the  attached  publication  of  the  Bureau  of  Indian  Standards  is  of  particular  interest 
to  the  public,  particularly  disadvantaged  communities  and  those  engaged  in  the  pursuit  of 
education  and  knowledge,  the  attached  public  safety  standard  is  made  available  to  promote  the 
timely  dissemination  of  this  information  in  an  accurate  manner  to  the  public. 


Mazdoor  Kisan  Shakti  Sangathan 
'The  Right  to  Information,  The  Right  to  Live' 


Jawaharlal  Nehru 
'Step  Out  From  the  Old  to  the  New' 


IS/IEC  60079-25  (2003) :  Electrical  apparatus  for  explosive 
gas  atmospheres,  Part  25:  Intrinsically  safe  systems  [ETD 
22:  Electrical  Apparatus  for  Explosive  Atmosphere] 


* 


<bVJJIi^j>^^^Vfl/ll^^^ag^Ts^^lITFS3egS 


[SS^  V I  l>5ft>!>5^>«SV: 


^^\\X^L 


" 


* 


Satyanarayan  Gangaram  Pitroda 
Invent  a  New  India  Using  Knowledge 


Bhartrhari — Nitisatakam 
"Knowledge  is  such  a  treasure  which  cannot  be  stolen" 


BLANK  PAGE 


<a^EL 


!**> 


PROTECTED  BY  COPYRIGHT 


IS/IEC  60079-25  :  2003 
*FFT  25    PMd^H  PNWcJ  T^fcT 

/naf/an  Standard 

ELECTRICAL  APPARATUS  FOR  EXPLOSIVE  GAS 

ATMOSPHERES 

PART  25  INTRINSICALLY  SAFE  SYSTEMS 


ICS  29.260.20 


©BIS  2007 

BUREAU    OF    INDIAN    STANDARDS 

MANAK  BHAVAN,  9  BAHADUR  SHAH  ZAFAR  MARG 
NEW  DELHI  110002 

November  2007  Price  Group  15 


Electrical  Apparatus  for  Explosive  Atmospheres  Sectional  Committee,  ETD  22 


NATIONAL  FOREWORD 

This  Indian  Standard  (Part  25)  which  is  identical  with  IEC  60079-25  :  2003  'Electrical  apparatus  for 
explosive  gas  atmospheres  —  Part  25:  Intrinsically  safe  systems'  issued  by  the  International 
Electrotechnical  Commission  (IEC)  was  adopted  by  Bureau  of  Indian  Standards  on  the 
recommendation  of  Electrical  Apparatus  for  Explosive  Atmospheres  Sectional  Committee  and 
approval  of  the  Electrotechnical  Division  Council. 

The  text  of  IEC  Standard  has  been  approved  as  suitable  for  publication  as  an  Indian  Standard  without 
deviations.  Certain  conventions  are,  however,  not  identical  to  those  used  in  Indian  Standards. 
Attention  is  particularly  drawn  to  the  following: 

a)  Wherever  the  words  'International  Standard'  appear  referring  to  this  standard,  they  should 
be  read  as  'Indian  Standard'. 

b)  Comma  (,)  has  been  used  as  a  decimal  marker,  while  in  Indian  Standards,  the  current 
practice  is  to  use  a  point  (.)  as  the  decimal  marker. 

In  this  adopted  standard,  references  appear  to  certain  International  Standards  for  which  Indian 
Standards  also  exist.  The  corresponding  Indian  Standards,  which  are  to  be  substituted  in  their 
respective  places  are  listed  below  along  with  their  degree  of  equivalence  for  the  editions  indicated: 


International  Standard 

IEC  60060-1  :  1989  High-voltage  test 
techniques  —  Part  1:  General 
definitions  and  test  requirements 


IEC      60079-0 
apparatus       for 
atmospheres    — 
requirements 

IEC     60079-11 
apparatus        for 
atmospheres    — 
safety  "i" 


2004      Electrical 

explosive       gas 

Part    0:     Genera! 

1 999     Electrical 

explosive        gas 

Part    1 1 :    Intrinsic 


Corresponding  Indian  Standard 

IS  2071  (Part  1)  :  1993  High-voltage  test 
techniques:  Part  1  General  definitions  and 
test  requirements  (second  revision) 

IS/I  EC  60079-0  :  2004  Electrical 
apparatus  for  explosive  gas  atmospheres: 
Part  0  General  requirements 

IS  5780  :  2002  Electrical  apparatus  for 
explosive  gas  atmospheres  -  Intrinsic 
safety  "i"  -  Specification  [second  revision) 


Degree  of 
Equivalence 

Identical 


do 


do 


The  technical  committee  has  reviewed  the  provisions  of  the  following  International  Standard  referred 
in  this  adopted  standard  and  has  decided  that  it  is  acceptable  for  use  in  conjunction  with  this 
standard: 


International  Standard 
IEC  60079-14  (2002) 


Title 

Electrical  apparatus  for  explosive  gas  atmospheres  —  Part  14:  Electrical 
installations  in  hazardous  area  (other  than  mines) 


Only  the  English  language  text  has  been  retained  while  adopting  it  in  this  Indian  Standard  and  as 
such  the  page  numbers  given  here  are  not  the  same  as  in  the  International  Standard. 


For  the  purpose  of  deciding  whether  a  particular  requirement  of  this  standard  is  complied  with,  the 
final  value,  observed  or  calculated  expressing  the  result  of  a  test,  shall  be  rounded  off  in  accordance 
with  IS  2  :  1960  'Rules  for  rounding  off  numerical  values  (revised)'.  The  number  of  significant  places 
retained  in  the  rounded  off  value  should  be  the  same  as  that  of  the  specified  value  in  this  standard. 
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Indian  Standard 

ELECTRICAL  APPARATUS  FOR  EXPLOSIVE  GAS 

ATMOSPHERES 

PART  25  INTRINSICALLY  SAFE  SYSTEMS 

1  Scope 

1.1  This  part  of  IEC  60079  contains  the  specific  requirements  for  construction  and 
assessment  of  intrinsically  safe  electrical  systems,  type  of  protection  "i",  intended  for  use,  as 
a  whole  or  in  part,  in  explosive  atmospheres  in  Group  II  locations.  This  standard  is  intended 
for  use  by  the  designer  of  the  system  who  may  be  a  manufacturer,  a  specialist  consultant  or  a 
member  of  the  end-user's  staff. 

1.2  This  standard  supplements  IEC  60079-11,  the  requirements  of  which  apply  to  electrical 
apparatus  used  in  intrinsically  safe  electrical  systems. 

1.3  The  installation  requirements  of  a  Group  II  system  designed  in  accordance  with  this 
standard  are  specified  in  IEC  60079-14. 

2  Normative  references 

The  following  referenced  documents  are  indispensable  for  the  application  of  this,  document. 
For  dated  references,  only  the  edition  cited  applies.  For  undated  references,  the  latest  edition 
of  the  referenced  document  (including  any  amendments)  applies. 

IEC  60060-1,  High-voltage  test  techniques  -  Part  1:  General  definitions  and  test  requirements 

IEC  60079-0,  Electrical  apparatus  for  explosive  gas  atmospheres  -  Part  0:  General 
requirements 

IEC  60079-11:1999,  Electrical  apparatus  for  explosive  gas  atmospheres  -  Part  11:  Intrinsic 
safety  "i" 

IEC  60079-14:2002,  Electrical  apparatus  for  explosive  gas  atmospheres  -  Part  14:  Electrical 
installations  in  hazardous  areas  (other  than  mines) 

3  Definitions 

For  the  purposes  of  this  document,  the  following  definitions,  specific  to  intrinsically  safe 
electrical  systems,  apply.  They  supplement  the  definitions  which  are  given  in  IEC  60079-0  and 
IEC  60079-11. 

3.1 

intrinsically  safe  electrical  system 

assembly  of  interconnected  items  of  electrical  apparatus,  described  in  a  descriptive  system 
document,  in  which  the  circuits  or  parts  of  circuits,  intended  to  be  used  in  an  explosive 
atmosphere,  are  intrinsically  safe  circuits 
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3.1.1 

certified  intrinsically  safe  electrical  system 

electrical  system  conforming  to  3.1  for  which  a  certificate  has  been  issued  confirming  that  the 
electrical  system  complies  with  this  standard 

3.1.2 

uncertified  intrinsically  safe  electrical  system 

electrical  system  conforming  to  3.1  for  which  the  knowledge  of  the  electrical  parameters  of  the 
items  of  certified  intrinsically  safe  electrical  apparatus,  certified  associated  apparatus,  simple 
apparatus  and  the  knowledge  of  the  electrical  and  physical  parameters  of  the  interconnecting 
wiring  permit  the  unambiguous  deduction  that  intrinsic  safety  is  preserved 

3.2 

descriptive  system  document 

document  in  which  the  items  of  electrical  apparatus,  their  electrical  parameters  and  those  of 
the  interconnecting  wiring  are  specified 

3.3 

system  designer 

person  who  is  responsible  for  the  descriptive  system  document,  has  the  necessary 
competence  to  fulfil  the  task  and  who  is  empowered  to  enter  into  the  commitments  on  behalf 
of  his  employer 

3.4 

maximum  cable  capacitance  (Cc) 

maximum  capacitance  of  the  interconnecting  cable  that  can  be  connected  into  an  intrinsically 
safe  circuit  without  invalidating  intrinsic  safety 

3.5 

maximum  cable  inductance  (Lc) 

maximum  inductance  of  the  interconnecting  cable  that  can  be  connected  into  an  intrinsically 
safe  circuit  without  invalidating  intrinsic  safety 

3.6 

maximum  cable  inductance  to  resistance  ratio  (LCIRC) 

maximum  value  of  the  ratio  inductance  (Lc)  to  resistance  (Rc)  of  the  interconnecting  cable  that 
can  be  connected  into  an  intrinsically  safe  circuit  without  invalidating  intrinsic  safety 

3.7 

linear  power  supply 

power  source  from  which  the  available  output  current  is  determined  by  a  resistor.  The  output 
voltage  decreases  linearly  as  the  output  current  increases 

3.8 

non-linear  power  supply 

power  supply  where  the  output  voltage  and  output  current  have  a  non-linear  relationship 

EXAMPLE    A  supply  with  a  constant  voltage  output  up  to  a  constant  current  limit  controlled  by  semiconductors. 

4     Descriptive  system  document 

A  descriptive  system  document  shall  be  created  for  all  systems.  The  descriptive  system 
document  shall  provide  an  adequate  analysis  of  the  level  of  safety  achieved  by  the  system. 
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Annex  E  comprises  examples  of  typical  diagrams,  which  illustrate  the  requirements  of  the 
descriptive  system  document. 

The  minimum  requirements  are  as  follows: 

a)  block  diagram  of  the  system  listing  all  the  items  of  apparatus  within  the  system; 

b)  a  statement  of  the  group  subdivision,  temperature  classification,  category  and  ambient 
temperature  rating  in  accordance  with  Clauses  5,  6  and  7; 

c)  the  requirements  and  permitted  parameters  of  the  interconnecting  wiring  in  accordance 
with  Clause  8; 

d)  details  of  the  earthing  and  bonding  points  of  the  systems  in  accordance  with  Clause  9. 
When  surge  protection  devices  are  used,  an  analysis  in  accordance  with  Clause  10  shall 
also  be  included; 

e)  where  applicable  the  justification  of  the  assessment  of  apparatus  as  'simple  apparatus'  in 
accordance  with  IEC  60079-11  shall  be  included.  In  particular,  where  several  pieces  of 
simple  apparatus  are  included,  the  analysis  of  the  summation  of  their  parameters  shall  be 
available; 

f)  a  unique  identification  of  the  descriptive  system  document  shall  be  created; 

g)  the  system  designer  shall  sign  and  date  the  document. 

5  Grouping  and  classification 

Intrinsically  safe  electrical  systems  shall  be  placed  in  Group  II  as  defined  in  IEC  60079-0.  The 
system  as  a  whole  or  parts  thereof  shall  be  given  a  further  subdivision  of  the  classification  as 
appropriate. 

Apparatus  within  a  Group  II  intrinsically  safe  system,  intended  for  use  in  explosive 
atmospheres,  shall  be  given  a  surface  temperature  class  in  accordance  with  IEC  60079-0  and 

IEC  60079-11. 

NOTE  1  In  Group  II  intrinsically  safe  electrical  systems,  or  parts  thereof,  the  subdivisions  A,  B,  C  may  be  different 
from  those  of  the  particular  intrinsically  safe  electrical  apparatus  and  associated  electrical  apparatus  included  in 
the  system. 

NOTE  2  Different  parts  of  the  same  intrinsically  safe  electrical  system  may  have  different  subdivisions  (A,  B,  C). 
The  apparatus  used  may  have  different  surface  temperature  classes  and  different  ambient  temperature  ratings. 

6  System  categories 

6.1       General 

Each  part  of  an  intrinsically  safe  electrical  system  intended  for  use  in  a  explosive  atmosphere 
shall  be  placed  in  a  category  either  "ia"  or  "ib"  in  accordance  with  IEC  60079-11.  The 
complete  system  need  not  necessarily  be  placed  in  a  single  category. 

The  descriptive  system  document  shall  specify  the  category  of  the  system  or,  where 
necessary,  the  category  of  different  parts  of  the  system. 

NOTE  For  example,  where  an  instrument  is  primarily  an  "ib"  instrument  but  which  is  designed  for  the  connection 
of  an  "ia"  sensor,  such  as  a  pH  measuring  instrument  with  its  connected  probe,  the  part  of  the  system  up  to  the 
instrument  is  "ib"  and  the  sensor  and  its  connections  "ia". 

Clause  11  contains  details  of  the  required  assessment. 
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6.2  Category  "ia" 

Where  the  requirements  applicable  to  electrical  apparatus  of  category  "ia"  (see  5.2  of 
IEC  60079-11)  are  satisfied  by  an  intrinsically  safe  system  or  part  of  a  system  considered  as 
an  entity,  then  that  system  or  part  of  a  system  shall  be  placed  in  category  "ia". 

6.3  Category  "ib" 

Where  the  requirements  applicable  to  electrical  apparatus  of  category  "tb"  (see  5.3  of 
IEC  60079-11)  are  satisfied  by  an  intrinsically  safe  system  or  part  of  a  system  considered 
as  an  entity,  then  that  system  or  part  of  a  system  shall  be  placed  in  category  "ib". 

7  Ambient  temperature  rating 

Where  part  or  all  the  intrinsically  safe  system  is  specified  as  being  suitable  for  operation 
outside  the  normal  operating  temperature  range  of  -20  °C  and  +40  °C,  this  shall  be  specified 
in  the  descriptive  system  document. 

8  Field  wiring 

The  electrical  parameters  of  the  interconnecting  wiring  upon  which  intrinsic  safety  depends 
and  their  derivation  shall  be  specified  in  the  descriptive  system  document.  Alternatively,  a 
specific  type  of  cable  shall  be  specified  and  the  justification  for  its  use  included  in  the 
documentation.  Where  a  specific  type  of  cable  is  specified,  then  it  shall  comply  with  the 
relevant  requirements  of  IEC  60079-14. 

Where  relevant,  the  descriptive  system  document  shall  also  specify  the  permissible  types  of 
multicore  cables  as  specified  in  IEC  60079-14,  which  each  particular  circuit  may  utilize.  In  the 
particular  case  where  faults  between  separate  circuits  have  not  been  taken  into  account,  then 
a  note  shall  be  included  on  the  block  diagram  of  the  descriptive  system  document  stating  the 
following:  "where  the  interconnecting  cable  utilizes  part  of  a  multicore  containing  other 
intrinsically  safe  circuits,  then  the  multicore  must  be  in  accordance  with  the  requirements  of 
a  multicore  type  A  or  B  as  specified  in  IEC  60079-14". 

9  Earthing  and  bonding  of  intrinsically  safe  systems 

In  general,  an  intrinsically  safe  circuit  shall  either  be  fully  floating  or  bonded  to  the  reference 
potential  associated  with  the  hazardous  area  at  one  point  only.  The  level  of  isolation  required 
(except  at  one  point)  is  to  be  designed  to  withstand  a  500  V  insulation  test  in  accordance  with 
6.4.12  of  IEC  60079-11.  Where  this  requirement  is  not  met,  then  the  circuit  shall  be 
considered  to  be  earthed  at  that  point.  More  than  one  earth  connection  is  permitted  on  a 
circuit,  provided  that  the  circuit  is  galvanically  separated  into  sub-circuits,  each  of  which  has 
only  one  earth  point. 

Screens  shall  be  connected  to  earth  or  the  structure  in  accordance  with  IEC  60079-14.  Where 
a  system  is  intended  for  use  in  an  installation  where  significant  potential  differences  (greater 
than  10  V)  between  the  structure  and  the  circuit  can  occur,  the  preferred  technique  is  to  use  a 
circuit  galvanically  isolated  from  external  influences  such  as  changes  in  ground  potential  at 
some  distance  from  the  structure.  Particular  care  is  required  where  part  of  the  system  is 
intended  to  be  used  in  a  zone  0  location. 
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The  descriptive  system  document  should  clearly  indicate  which  point  or  points  of  the  system 
are  intended  to  be  connected  to  the  plant  reference  potential  and  any  special  requirements  of 
such  a  bond.  This  may  be  achieved  by  cross-references  to  IEC  60079-14.  The  point  or  points 
at  which  the  intrinsically  safe  system  is  connected  to  the  plant  shall  be  determined  in 
accordance  with  IEC  60079-14. 

10   Protection  against  lightning  and  other  electrical  surges 

Where  a  risk  analysis  shows  that  an  installation  is  particularly  susceptible  to  lightning  or  other 
surges,  precautions  shall  be  taken  to  avoid  the  possible  hazards. 

If  part  of  an  intrinsically  safe  circuit  is  installed  in  a  zone  0  in  such  a  way  that  there  is  a  risk  of 
developing  hazardous  or  damaging  potential  differences  within  the  zone  0,  a  surge  protection 
device  shall  be  installed.  Surge  protection  is  required  between  each  conductor  of  the  cable 
including  the  screen  and  the  structure  where  the  conductor  is  not  already  bonded  to  the 
structure.  The  surge  protection  device  shall  be  installed  outside  but  as  near  to  the  boundary 
of  zone  0  as  is  practicable,  preferably  within  1  m. 

Surge  protection  for  apparatus  in  zones  1  and  2  shall  be  Included  in  the  system  design  for 
highly  susceptible  locations. 

The  surge  protection  device  shall  be  capable  of  diverting  a  minimum  peak  discharge  current 
of  10  kA  (8/20  (xs  impulse  according  to  IEC  60060-1  for  10  operations).  The  connection 
between  the  protection  device  and  the  local  structure  shall  have  a  minimum  cross-sectional 
area  equivalent  to  4  mm2  copper.  The  cable  between  the  intrinsically  safe  apparatus  in  zone  0 
and  the  surge  protection  device  shall  be  installed  in  such  a  way  that  it  is  protected  from 
lightning.  Any  surge  protection  device  introduced  into  an  intrinsically  safe  circuit  shall  be 
suitably  explosion  protected  for  its  intended  location. 

The  use  of  surge  protection  devices  which  interconnect  the  circuit  and  the  structure  via  non- 
linear devices  such  as  gas  discharge  tubes  and  semiconductors  is  not  considered  to 
adversely  affect  the  intrinsic  safety  of  a  circuit,  provided  that  in  normal  operation  the  current 
through  the  device  is  less  than  10  uA. 

NOTE  If  insulation  testing  at  500  V  is  carried  out  under  well-controlled  conditions,  then  it  may  be  necessary  to 
disconnect  the  surge  suppression  devices  to  prevent  them  invalidating  the  measurement. 

Intrinsically  safe  systems  utilizing  surge  suppression  techniques  must  be  supported  by  an 
adequately  documented  analysis  of  the  effect  of  indirect  multiple  earthing,  taking  into  account 
the  criteria  set  out  above.  The  capacitance  and  inductance  of  the  surge  suppression  devices 
shall  be  considered  in  the  assessment  of  the  intrinsically  safe  system. 

Annex  F  illustrates  some  aspects  of  the  design  of  surge  protection  of  an  intrinsically  safe 
system. 
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11    Assessment  of  an  intrinsically  safe  system 

11.1     General 

Where  a  system  contains  apparatus  which  does  not  separately  conform  to  IEC  60079-11,  then 
that  system  shall  be  analysed  as  a  whole.  The  system  shall  be  analysed  as  if  it  were  an 
apparatus.  A  category  uia"  system  shall  be  analysed  in  accordance  with  the  criteria  of  5.2  of 
IEC  60079-11.  A  category  "ib"  system  shall  be  analysed  in  accordance  with  the  criteria  of  5.3 
of  IEC  60079-11.  In  addition  to  the  faults  within  the  apparatus,  the  failures  within  the  field 
wiring  listed  in  11.3  shall  also  be  taken  into  account. 

NOTE  1  It  is  recognized  that  applying  faults  to  the  system  as  a  whole  is  less  stringent  than  applying  faults  to  each 
piece  of  apparatus;  nevertheless,  this  is  considered  to  achieve  an  acceptable  level  of  safety. 

Where  all  the  necessary  information  is  available,  it  is  permissible  to  apply  the  fault  count  to 
the  system  as  a  whole  even  when  apparatus  conforming  to  IEC  60079-11  is  being  used.  This 
is  an  alternative  solution  to  the  more  usual  straightforward  comparison  of  input  and  output 
characteristics  of  the  separately  analysed  or  tested  apparatus.  Where  a  system  contains  only 
separately  analysed  or  tested  apparatus  conforming  to  IEC  60079-11,  the  compatibility  of  all 
the  apparatus  included  in  the  system  shall  be  demonstrated.  Faults  within  the  apparatus  have 
already  been  considered  and  no  further  consideration  of  these  faults  is  necessary.  Where  a 
system  contains  a  single  source  of  power,  then  the  output  parameters  of  the  power  source 
take  into  account  the  possible  cable  failures,  and  consequently  these  failures  do  not  need  to 
be  further  considered.  Annex  A  contains  further  details  of  the  analysis  of  these  simple  circuits. 

Where  apparatus  can  possibly  interconnect  separate  intrinsically  safe  circuits,  for  example,  a 
resistance  thermometer  with  two  separate  resistance  windings,  then  the  interconnected 
circuits  shall  be  assessed  as  a  single  circuit. 

When  a  system  contains  more  than  one  linear  source  of  power,  then  the  effect  of  the 
combined  sources  of  power  shall  be  analysed.  Annex  B  illustrates  the  analysis  to  be  used  in 
the  most  frequently  occurring  combinations. 

If  an  intrinsically  safe  system  contains  more  than  one  source  of  power,  and  one  or  more  of 
these  sources  are  non-linear,  the  assessment  method  described  in  Annex  B  cannot  be  used. 
For  this  kind  of  intrinsically  safe  system,  Annex  C  explains  how  the  system  analysis  can  be 
done  if  the  combination  contains  a  single  non-linear  power  supply. 

NOTE  2  If  further  expert  advice  is  required,  it  should  be  sought  from  a  body  such  as  an  accepted  certification 
body  (ACB)  under  the  lECEx  scheme. 

Figure  1  illustrates  the  principles  of  system  analysis. 
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11.2  Analysis  of  inductive  circuits 

Where  an  apparatus  has  a  well-defined  inductance  and  resistance  either  by  virtue  of  its 
documentation  or  construction,  then  the  safety  of  the  inductive  aspects  of  the  system  shall  be 
confirmed  by  the  process  defined  in  Annex  D. 

11.3  Failures  in  field  wiring 

When  designing  a  system  which  requires  consideration  of  the  failure  of  the  field  wiring,  then 
the  following  failures  shall  be  applied: 

a)  open  circuit  of  any  number  of  field  wiring  conductors; 

b)  short  circuit  between  any  numbers  of  field  wiring  conductors  and  screens; 

c)  failure  to  the  bonded  structure  or  armour  at  any  point.  For  the  purposes  of  this  analysis, 
the  return  path  in  the  structure  or  armour  shall  be  considered  to  have  zero  impedance  and 
not  to  introduce  any  voltage  or  current  into  the  circuit. 

The  acceptable  parameters  of  the  interconnecting  cables  shall  be  calculated  using  a  factor  of 
safety  of  1,5  in  accordance  with  10.4.2  of  IEC  60079-11. 

11.4  Type  verifications  and  type  tests 

Where  it  is  necessary  to  carry  out  type  verifications  and/or  type  tests  to  establish  that 
a  system  is  adequately  safe,  then  the  methods  specified  in  Clause  10  of  IEC  60079-11 
shall  be  used. 

12    Marking 

All  apparatus  within  the  system  shall  be  readily  identifiable.  In  the  case  of  'simple  apparatus', 
a  traceable  plant  identification  label  is  acceptable. 

The  minimum  requirement  is  that  the  relevant  descriptive  system  document  shall  be  readily 
traceable.  One  acceptable  technique  is  a  clear  instrument  loop  number,  which  identifies  the 
loop  documentation,  which  in  turn  lists  the  descriptive  system  document. 

If  a  system  contains  apparatus  separately  assessed  or  tested  in  accordance  with  IEC  60079-11, 
such  apparatus  retains  its  original  marking. 

Where  a  system  is  assessed  as  a  whole  and  is  found  to  conform  to  IEC  60079-11,  then  each 
piece  of  apparatus  shall  be  marked  in  accordance  with  that  standard. 
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Annex  A 

(normative) 

Assessment  of  a  simple  intrinsically  safe  system 


This  simple  analysis  is  only  applicable  when  the  system  considered  uses  only  one  source  of 
power. 

The  process  of  determining  the  acceptability  of  the  simple  system,  which  is  illustrated  by  the 
example  of  Figure  A.1,  shall  be  as  follows: 

a)  determine  the  category  or  group  subdivision  of  the  system  by  consideration  of  the 
information  for  the  two  individual  pieces  of  certified  apparatus.  The  system  adopts  the 
lowest  common  denominator  of  the  two  pieces  of  apparatus.  Hence,  if  either  piece  of 
apparatus  is  "ib",  then  the  system  is  "ib".  The  group  subdivision  is  determined  by  the  least 
sensitive  group  IIC,  MB,  HA  in  order  of  decreasing  sensitivity.  In  the  example  illustrated  by 
Figure  A.1  the  system  becomes  Ex  ia  IIC.  It  is  permitted  for  different  parts  in  the  system  to 
have  different  categorization  and  classification.  In  these  circumstances,  the  descriptive 
system  document  should  clearly  define  the  separate  parts  of  the  circuit; 

b)  check  the  voltage,  current  and  power  parameters  as  follows: 
U0ZVX 

'o  *'i 

Where  the  effective  input  resistance  of  the  intrinsically  safe  apparatus  is  specified,  then  the 
calculation  of  the  permitted  input  current  may  include  this  parameter.  In  the  example 
illustrated  there  is  no  problem; 

c)  determine  the  temperature  classification  of  the  intrinsically  safe  apparatus,  which  may 
depend  on  the  current  or  power  parameters  of  the  connected  source; 

d)  the  maximum  permitted  cable  capacitance  [Cc]  is  the  permitted  capacitance  for  the  source 
of  power  [C0]  less  the  effective  input  capacitance  of  the  intrinsically  safe  apparatus  [C\]  that 
is  CC  =  C0-  Cj; 

e)  the  maximum  permitted  cable  inductance  [Lc]  is  the  permitted  inductance  for  the  source  of 
power  [L0]  less  the  effective  input  inductance  of  the  intrinsically  safe  apparatus  [LJ  that  is 

f)  where  the  power  supply  is  a  resistance  limited  linear  source,  then  the  permissible  Lc/Rc 
ratio  is  determined  in  accordance  with  Annex  D. 

Some  sources  of  power  can  be  bi-directional,  for  example,  shunt  diode  safety  barriers 
intended  for  alternating  current  signals.  In  these  circumstances,  the  effect  of  both  polarity 
outputs  shall  be  considered. 
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Figure  A.1  -  Interconnection  of  intrinsically  safe  apparatus  with  associated  apparatus 
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Annex  B 

(normative) 

Assessment  of  circuits  with  more  than  one  source  of  power 


This  analysis  is  only  applicable  when  the  power  sources  considered  use  a  linear  resistive 
limited  output.  It  is  not  applicable  to  power  sources  using  other  forms  of  current  limitation. 

IEC  60079-14,  Annex  B,  contains  a  simplified  procedure,  which  gives  conservative  results, 
which  ensure  a  safe  installation  and  may  be  used  as  an  alternative  to  this  annex. 

Where  there  is  more  than  one  source  of  power  and  the  interconnections  are  made  under 
controlled  conditions  so  as  to  provide  adequate  segregation  and  mechanical  stability  in 
accordance  with  IEC  60079-11,  then  the  interconnections  are  considered  to  fail  to  open  and 
short  circuit  but  not  so  as  to  reverse  the  connections  or  to  change  a  series  into  a  parallel 
connection  or  a  parallel  connection  into  a  series  one.  Interconnections  made  within  a  rack  or 
panel  constructed  in  a  location  with  adequate  quality  control  and  test  facilities  are  an  example 
of  the  degree  of  integrity  required. 

Figure  B.1  illustrates  the  usual  series  combination.  This  series  situation  results  in  the  open 
circuit  voltage  U0  being  U^  +  U2  but  the  possibility  of  the  voltage  being  UA  -  U2  is  not 
considered.  In  considering  the  safety  of  the  system,  three  voltages  U^,  U2  and  U0  =  U^  +  U2 
are  considered  together  with  their  corresponding  currents  /1  and  I2  and  the  combined. 

_  Ui+U2 
0        RA  +  R2 


Each  of  the  three  equivalent  circuits  has  to  be  assessed  for  safety  using  Table  A.1  of 
IEC  60079-11.  The  value  of  L0,  L0/RQ  and  C0  must  then  be  established  for  each  circuit  and  the 
most  onerous  value  used  together  with  its  relevant  equivalent  circuit. 


A  factor  of  safety  1,5  shall  be  used  in  determining  these  values  in  all  circumstances. 

NOTE  Where  the  two  voltages  add,  the  combined  circuit  will  decide  the  capacitive  figure.  However,  the 
inductance  and  the  LJR0  ratio  may  be  determined  by  one  of  the  separate  circuits  being  considered  on  its  own.  The 
minimum  inductance  does  not  always  coincide  with  the  maximum  circuit  current  and  the  minimum  L^R^  ratio  may 
not  be  coincident  with  the  minimum  inductance. 

The  matched  power  available  from  each  of  the  equivalent  circuits  should  be  determined.  The 
matched  power  of  the  combined  circuit  is  the  sum  of  the  power  available  from  each  circuit 
only  when  the  sources  have  the  same  output  current. 

When  the  sources  of  power  are  connected  in  parallel  as  in  Figure  B.2,  then  the  three  currents 
/^  I2  and  70  =  ^  +  I2  have  to  be  considered  with  their  corresponding  voltages  U^,  U2  and 

v   =UiR2+U2R, 


Rl+R2 
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Each  of  the  three  equivalent  circuits  has  to  be  assessed  for  safety  .using  Table  A.1  of 
IEC  60079-11.  The  values  L0,  L0/R0  and  C0  have  to  be  established  for  each  circuit  and  the 
most  onerous  value  used  together  with  its  relevant  equivalent  circuit.  The  matched  power 
available  from  each  of  the  three  equivalent  circuits  must  also  be  established.  The  matched 
power  of  the  combined  circuit  is  the  sum  of  the  power  available  from  each  circuit  only  when 
the  sources  have  the  same  output  voltage. 

Where  two  sources  of  power  are  connected  to  the  same  intrinsically  safe  circuit  and  their 
interconnections  are  not  well  defined  by  reliable  interconnections  as  illustrated  in  Figure  B.3, 
then  there  is  a  possibility  that  the  sources  of  power  can  be  connected  in  both  series  and 
parallel.  In  these  circumstances,  all  the  possible  equivalent  circuits  have  to  be  evaluated, 
following  both  the  procedures  set  out.  The  most  onerous  output  parameters  and  equivalent 
circuits  have  to  be  utilized  in  establishing  the  integrity  of  the  intrinsically  safe  system. 

The  hazardous  area  apparatus  may  contain  a  source  of  power,  which  results  in  the  apparatus 
having  significant  output  parameters,  for  example  from  internal  batteries.  When  this  occurs, 
the  analysis  of  the  system  shall  include  the  combination  of  this  source  of  power  with  any 
source  of  power  in  the  associated  apparatus.  Such  an  analysis  shall  normally  include  the 
reversal  of  the  interconnection  because  of  the  possible  failure  of  the  field  wiring. 

Having  established  the  representative  equivalent  circuits,  then  these  circuits  can  be  used  as  if 
there  was  a  single  source  of  power,  and  the  procedure  already  discussed  in  Annex  A  can  be 
used  to  establish  whether  the  system  as  a  whole  is  acceptably  safe. 

When  two  or  more  sources  of  power  with  different  output  voltages  are  interconnected  then  the 
resultant  circulating  current  can  cause  additional  dissipation  in  the  regulating  circuits.  Where 
the  circuits  have  conventional  resistive  current  limiting,  then  the  additional  dissipation  is  not 
considered  to  adversely  affect  intrinsic  safety. 
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Figure  B.1  -  Sources  of  power  connected  in  series 
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Figure  B.2  -  Sources  of  power  connected  in  parallel 
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Annex  C 

(informative) 

Interconnection  of  non-linear  and  linear  intrinsically  safe  circuits 


This  subject  has'  been  under  active  consideration  for  some  considerable  time  and  is  still 
leveloping.  This  document  is  the  considered  opinion  of  a  major  test  house  and  has  been 
extensively  reviewed,  it  is  the  best  knowledge  currently  available  and  is  included  so  that  wider 
experience  of  its  use  can  be  obtained. 

The  design  and  application  of  non-iinear  power  supplies  does  require  specialist  knowledge 
and  access  to  appropriate  test  facilities.  Where  an  authorized  test  house  has  satisfied  itself 
that  a  particular  source  of  power  is  adequately  safe  then  it  is  permissible  to  design  a  system 
in  accordance  with  this  standard.  Any  particular  conditions  relating  to  such  a  system  shall  be 
clearly  stated  in  the  accompanying  documentation. 

Where  a  safety  analysis  of  a  combination  of  power  supplies  using  non-linear  outputs  is  carried 
out  then  the  interaction  of  the  two  circuits  may  cause  a  considerable  increase  in  the 
dissipation  in  the  regulating  circuit  components.  This  factor  must  be  taken  into  account.  It  is 
recommended  to  have  only  one  power  supply  containing  regulating  semiconductors  combined 
with  linear  and/or  trapezoidal  sources. 

C.1       Introduction 

The  installation  rules  in  IEC  60079-14  permit  the  operator  in  control  of  a  hazardous  area  to 
combine  several  intrinsically  safe  circuits  by  interconnection.  This  also  includes  the  case 
where  several  'associated  apparatus'  (that  is,  active  in  normal  operation  or  only  under  fault 
conditions)  are  involved  (see  12.2.5.2  of  IEC  60079-14).  Where  this  is  done,  it  is  not  required 
to  involve  a  testing  station  or  an  authorized  engineer  if  a  calculated  or  test-based  proof  of  the 
intrinsic  safety  of  the  interconnection  is  carried  out. 

The  test-based  proof  shall  be  performed  using  the  standard  spark  test  apparatus  according  to 
IEC  60079-11  considering  the  safety  factor  6f  the  combined  electrical  apparatus.  In  this  case, 
certain  fault  conditions  leading  to  the  most  unfavourable  ignition  conditions  -  the  'worst  case' 
approach  -  shall  be  taken  into  account.  Thus  this  method  of  proof  often  meets  with  difficulties 
in  practice  and  is  usually  reserved  for  testing  stations. 

An  assessment  by  calculation  of  the  interconnection  can  be  carried  out  easily  at  least  for 
resistive  circuits,  if  the  electrical  sources  involved  have  a  linear  internal  resistance  as  shown 
in  Figure  C.1a).  In  this  case,  the  ignition  limit  curves  in  IEC  60079-11  apply  and  the  method 
described  in  IEC  60079-14,  Annex  A,  or  in  Figure  C.7  and  Figure  C.8  of  this  document 
can  be  used. 
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Figure  C.1a)  -  Linear  characteristics 
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Figure  C.1b)  -Trapezoidal  characteristics 
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Figure  C.1c)  -  Rectangular  characteristics 

Figure  C.1  -  Equivalent  circuit  and  output  characteristic  of  resistive  circuits 

The  first  step  is  to  evaluate  the  new  maximum  values  of  voltage  and  current  resulting  from 
combining  the  associated  apparatus.  If  the  associated  apparatus  are  combined  as  shown  in 
Figure  C.2a),  there  is  a  series  connection.  The  maximum  open-circuit  voltage  values,  U0  of 
the  individual  sub-assemblies  are  added  and  the  maximum  value  of  the  short-circuit  currents, 
70  of  the  sub-assemblies  is  taken.  In  an  arrangement  like  that  in  Figure  C.2c),  there  is  a 
parallel  connection.  The  short-circuit  currents  are  added  while  the  greatest  value  of  the  open- 
circuit  voltage  is  taken. 

If  the  arrangement  of  the  apparatus  is  not  clearly  defined  with  respect  to  the  polarity  (as  in 
Figure  C.2e)),  then  there  may  be  a  series  or  parallel  connection  depending  on  the  fault 
condition  considered.  In  this  case,  voltage  addition  and  current  addition  must  be  assumed  for 
both,  but  separately.  The  most  unfavourable  values  have  to  be  taken  as  a  basis. 
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Figure  C.2a)  -  Series  connection  with  voltage  addition 
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Figure  C.2b)  -  Series  connection  with  voltage  addition  and  possibly  current  addition 
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Figure  C.2c)  -  Parallel  connection  with  current  addition 
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Figure  C.2d)  -  Parallel  connection  with  current  and  possibly  voltage  addition 
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Figure  C.2e)  -  Series  or  parallel  connection  with  current  and  voltage  addition 

Figure  C.2  -  Current  and/or  voltage  addition  for  interconnections 

After  determining  the  new  maximum  values  of  current  and  voltage,  the  intrinsic  safety  of  the 
combined  circuit  shall  be  checked  by  means  of  the  ignition  limit  curves  given  in  IEC  60079-11, 
taking  account  of  the  safety  factor  for  the  resistive  circuit,  and  the  new  maximum  permissible 
values  of  external  inductance  L0  and  capacitance  C0  shall  be  determined.  Here,  however,  the 
procedure  introduced  in  IEC  60079-14,  Annex  A,  shows  a  weakness,  caused  by  the  following: 

-  the  maximum  permissible  inductances  are  valid  only  for  a  maximum  voltage  of  24  V; 

-  the  occurrence  of  both  inductance  and  capacitance  is  not  taken  into  account. 
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If  proceeding  on  the  basis  of  open-circuit  voltages  and  short-circuit  currents  only,  the  safety 
factor  obtained  really  decreases  from  the  desired  value  of  1,5  to  approximately  1,0  in  the 
voltage  range  above  20  V.  This  seems  to  be  acceptable,  since  the  interconnection  according 
to  IEC  60079-14  can  only  meet  category  "ib"  generally,  even  if  all  the  individual  apparatus 
meets  category  "ia".  However,  in  the  case  of  low  voltages,  the  safety  factor  can  drop 
considerably  below  the  value  of  1,0.  Such  an  approach  is  thus  not  effective  with  regard  to 
safety. 

If  one  or  more  active  sources  within  one  circuit  have  non-linear  characteristics,  evaluating  on 
the  basis  of  no-load  voltages  and  short-circuit  currents  only  cannot  accomplish  the  original 
intention. 

In  practice,  sources  with  'trapezoidal'  shape  (see  Figure  C.1b))  are  used  and  'rectangular' 
output  characteristics  (see  Figure  C.1c))  occur  often  if  electronic  current-limiting  devices  are 
used.  For  such  circuits,  the  ignition  limit  curves  in  IEC  60079-11  cannot  be  used.  This 
standard  therefore  describes  a  method  that  allows  the  safety  evaluation  of  the  combination  of 
networks  including  non-linear  circuits  by  means  of  diagrams.  A  new  computer-aided  spark 
ignition  model  allows  the  desired  safety  factor  to  be  achieved  for  both  non-linear  sources  and 
the  coincidence  of  inductance  and  capacitance  in  the  circuit. 

The  procedure  introduced  here  is  applicable  for  zone  1  and  for  explosion  groups  IIC  and  MB. 
It  should  be  emphasized  that  an  instrument  for  interconnection  is  being  proposed  here;  using 
it  for  defining  intrinsic  safety  parameters  of  individual  circuits  or  apparatus  makes  sense  only 
in  the  case  of  simple  rectangular  or  linear  circuits. 

C.2      Basic  types  of  non-linear  circuits 

C.2.1     Parameters 

Whilst  assessing  the  intrinsic  safety  of  active  circuits,  it  is  necessary  to  know  the  internal 
resistance  and  the  source  voltage.  In  the  simplest  case,  the  source  can  be  characterized  by 
two  (constant)  electrical  values,  either  by  the  voltage  UQ  and  the  internal  resistance  Rt  or 
by  UQ  and  the  short-circuit  current  10  (see  Figure  C.1a)).  UQ  often  is  determined  by  zener 
diodes.  U0  and  70  are  maximum  values  that  can  occur  under  the  fault  conditions  defined  in 
IEC  60079-11.  In  the  case  of  Figure  C.1a),  the  characteristic  is  linear.  Unfortunately,  in 
practice,  only  a  few  circuits  can  be  represented  in  this  simple  way. 

A  battery,  for  example,  fitted  with  an  external  current  limiting  resistor  has  no  constant  internal 
resistance.  Likewise,  the  source  voltage  changes  as  a  function  of  the  degree  of  charge. 
In  order  to  study  the  behaviour  of  such  practical  circuits,  they  are  represented  by  their  simpler 
equivalent  circuits  that  must  obviously  not  be  less  capable  of  causing  ignition  than  the  actual 
circuit.  In  the  above  case  of  a  battery,  one  would  take  the  maximum  open  circuit  as  U0  and 
the  external  resistance  as  Rt  as  in  Figure  C.1a).  This  equivalent  circuit  has  a  linear 
characteristic. 

Non-linear  circuits  can  also  be  reduced,  usually  to  the  two  basic  types  shown  in  Figures  C.1b) 
and  C.1c).  The  source  wtth  trapezoidal  characteristic  (Figure  C.1b))  consists  of  a  voltage 
source,  a  resistance  and  additional  voltage  limiting  components  (for  example,  zener  diodes) 
at  the  output  terminals.  The  rectangular  characteristic  of  Figure  C.1c)  has  the  current  limited 
by  an  electronic  current  regulator. 
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If  one  considers  the  output  power  of  the  different  networks,  it  becomes  obvious  that  different 
ignition  limit  values  shall  apply,  since  the  igniting  spark  is  also  a  'load'  and  its  matching  to  the 
source  feeding  it  shall  be  taken  into  account.  The  maximum  available  power  from  the  source 
shown  in  Figure  C.1a)  is 

and  for  the  trapezoidal  characteristic  (Figure  C.1b)): 

Pmax  =  *  Uq  *  A,  (for  Uo  >  *  *  UQ),  or 

Pmax  =  U0*(UQ-U0)W  (fort/0sl4xt/Q). 

The  trapezoidal  characteristic  of  Figure  C.1b)  becomes  the  rectangular  characteristic  of 
Figure  C.1c)  as  i/Q  tends  to  infinity. 

Here: 

^max  =  ^o  x  A>- 

For  the  complete  electrical  description  of  a  source,  two  parameters  are  needed  for  the  linear 
and  rectangular  characteristics  and  three  parameters  for  the  trapezoidal  characteristic 
(Table  C.1). 

Table  C.1  -  Parameters  necessary  to  describe  the  output  characteristic 


Characteristic 

Parameters  necessary 

Linear,  Figure  C.1a) 

U0,  I0  or  U0,  R 

Trapezoidal,  Figure  C.1b) 

U0,  Uq.Rot  Uq,  R,I0ot  U0,  Uq,  I0 

Rectangular,  Figure  C.1c) 

U0.IQ 

C.2.2    information  given  in  the  certificates 

Because,  according  to  12.2.1  or  12.3  of  IEC  60079-14,  apparatus  with  active  intrinsically  safe 
circuits  shall  be  certified,  it  can  be  assumed  that,  for  the  individual  apparatus  which  are  to  be 
combined  with  their  intrinsically  safe  circuits,  there  is  always  a  test  certificate  available  which 
contains  the  corresponding  electrical  parameters. 

The  first  step  in  any  safety-oriented  assessment  shall  be  the  determination  of  the  type  of 
characteristic  and  associated  electrical  parameters  of  the  individual  circuits.  Since  the  circuit 
arrangements  and  the  internal  construction  of  the  apparatus  are  not  normally  known  to  the 
user  or  operator,  they  will  have  to  trust  the  electrical  data  given  in  the  test  certificate. 

The  values  given  usually  are  as  follows:  open-circuit  voltage  (here  named  UQ)  and  short- 
circuit  current  (here  named  I0)  and  normally  the  maximum  available  power  P0.  It  is  often 
possible  to  conclude  information  about  the  type  of  characteristic  from  these  values. 

Example  (maximum  values): 


U0  =      12,5  V 
/0    =      0,1  A 
P0  =     313  mW 
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Because  P0  is  one-quarter  of  the  product  of  open-circuit  voltage  and  short-circuit  current,  it 
can  be  deduced  that  in  this  example  a  linear  characteristic  (Figure  C.1a))  is  effective. 

Example  (maximum  values): 

U0  =  20,5  V 
70  =  35  mA 
P0  =     718  mW 

Here  P0  is  the  product  of  the  open-circuit  voltage  and  the  short-circuit  current,  and  hence  a 
rectangular  characteristic  is  given  (Figure  C.1c». 

In  certain  cases,  the  values  for  power,  current  and  voltage  do  not  correspond  with  the  above 
because  the  power  rating  is  specified  for  the  stationary  case  (heating  effect  of  components 
connected  subsequently)  and  the  current  or  voltage  values  for  the  dynamic  case  (spark 
ignition)  are  given.  In  situations  where  there  is  a  doubt,  it  is  essential  to  verify  which 
characteristic  to  take  as  the  basis  for  the  interconnection  with  respect  to  spark  ignition. 

In  the  case  of  a  trapezoidal  characteristic,  the  information  in  the  test  certificate  is  often  not 
sufficient  to  determine  the  characteristic.  The  third  parameter  is  missing  (see  Table  C.1), 
either  UQ  or  R. 

When  R  is  given  as  the  additional  parameter,  there  is  the  least  danger  of  confusion.  Therefore 
R  will  generally  be  given  in  the  test  certificates.  The  parameter  UQ  (Figure  C.lb))  can  then  be 
derived  from  UQ-  I0x  R. 

In  most  cases,  the  test  certificate  will  also  give  the  characteristic  shape  of  any  non-linear 
circuits. 

An  example  may  look  as  follows. 

Maximum  values  (trapezoidal  characteristic): 

V0=  13,7  V 

I0    =  105  mA 

R    =  438  Q. 

P0  ■-  1  010  mW 

The  characteristic  represented  is  shown  in  Figure  C.3a);  Figure  C.3b)  shows  the  safety 
equivalent  circuit. 

Calculation  is  as  follows: 

t/Q  =     70  x R  =  46  V  and 

P0  =     {UQ  -  U0)  x  U0/R  =  1  010  mW 
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^4 

46V 


13,7  V 


X 


105  mA  / 


Figure  C.3  a)  -  Output  characteristics 

438  a 


*  o 


-  o 


46V  13,7V  ^    ^ 


Figure  C.3  b)  -  Equivalent  circuit 

Figure  C.3  -  Output  characteristic  and  equivalent  circuit  of  a  source 
with  trapezoidal  characteristic 

In  this  way,  the  data  needed  for  the  interconnection  can  be  obtained  from  the  information 
given  in  the  test  certificate.  If  there  is  no  data  in  the  older  certificates,  the  values  shall  be 
obtained  from  the  manufacturer  of  the  apparatus  or  from  the  testing  station. 

In  designing  intrinsically  safe  circuits,  an  attempt  should  be  made  always  to  keep  the 
interconnections  and  number  of  combined  sub-assemblies  low.  This  objective  cannot  always 
be  achieved  in  practice,  because  it  is  also  necessary  to  consider  fault  conditions.  This  means 
that  some  apparatus  which  are  not  acting  in  normal  operation  as  sources  have  to  be  regarded 
as  sources  in  the  case  of  failures. 

The  passive  inputs  of  devices,  for  example,  measurement  transducers,  plotters  etc,  can,  from 
the  safety  point  of  view,  also  act  as  active  sources.  Therefore  the  maximum  values  indicated 
in  the  certificates  shall  be  referred  to.  As  a  result,  the  operational  characteristics  of  a  circuit 
may  deviate  substantially  from  the  safety  characteristic.  The  values  given  in  the  certificates 
for  open  circuit  voltage  U0  and  short-circuit  current  70  for  the  circuit  concerned  are  stated  only 
for  transient  conditions  in  some  cases.  On  the  other  hand,  the  power  value  applies  for  steady- 
state  conditions  which  have  to  be  considered  for  the  temperature  rise  of  connected 
components. 
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C.3      Interconnection  of  intrinsically  safe  circuits  with  more  than  one  source 

C.3.1     Determination  of  a  resultant  output  characteristic 

It  is  assumed  that  the  output  characteristics  of  the  circuits  making  up  the  combination,  and 
which  are  to  be  regarded  as  sources,  are  known  (see  C.2).  It  is  then  necessary  to  ascertain 
from  the  type  of  interconnection  whether,  in  normal  operation  and  under  fault  conditions,  it  is 
necessary  to  consider  the  voltage  sum,  the  current  sum,  or  both  current  and  voltage  sums. 

If  the  combined  sources  are  connected  in  series  and  are  not  bonded,  for  example,  to  earth 
(Figure  C.2a)),  then,  irrespectively  of  the  polarity  of  the  sources,  voltage  addition  only  is 
possible.  The  resultant  output  characteristic  is  conveniently  found  by  graphical  addition.  Thus 
for  each  current  value,  the  voltages  of  the  individual  sources  are  added.  The  dotted-line  curve 
in  Figure  C.2  shows  the  resultant  characteristics  in  the  different  cases. 

In  the  series  circuit  shown  in  Figure  C.2b),  where  there  is  a  common  connection  of  both 
voltage  sources  at  the  load,  current  addition  can  be  excluded  only  if  the  polarity  of  both 
sources  in  the  direction  shown  here  is  fixed  with  respect  to  safety  (for  example,  for  certain 
safety  barriers).  With  sources  which  can  change  the  polarity  operationally  or  under  fault 
conditions,  both  voltage  and  current  addition  shall  be  considered  (see  Figure  C.2e)). 

In  the  parallel  arrangement  of  Figure  C.2c),  current  addition  is  only  possible  if,  with  bipolar 
sources,  two  poles  are  connected  in  each  case.  Voltage  addition  is  not  possible  in  this  case 
and  the  resultant  characteristic  is  generated  by  graphical  addition  of  individual  current  values. 

If  only  one  pole  of  each  source  is  connected  to  that  of  the  other  (Figure  C.2d)),  then  voltage 
addition  can  be  excluded  only  if  the  polarity  of  the  sources  as  shown  here  is  fixed  regarding 
all  circumstances  (for  example,  with  safety  barriers).  Otherwise,  both  voltage  and  current 
addition  shall  be  considered  (see  Figure  C.2e)). 

If  several  circuits  are  connected  to  a  circuitry  in  which  arbitrary  interconnections  shall  be 
assumed  (Figure  C.2e))(  then,  depending  on  the  fault  conditions  considered,  a  parallel  or 
series  connection  may  be  set  up,  so  that  both  current  and  voltage  addition,  shall  be 
considered.  Because  both  cases  are  not  possible  at  the  same  time,  the  resultant 
characteristic  for  current  addition  and  that  for  voltage  addition  shall  be  constructed 
separately.  This  procedure  is  necessary  also  in  all  cases  of  doubt  for  the  circuits  in  Figures 
C.2b)  and  C.2d)  as  well  as  with  circuits  with  more  than  two  conductors.  The  result  so  obtained 
will  always  be  on  the  safe  side. 

C.3.2    Safety  assessment  of  the  interconnection  and  determination 
of  the  maximum  permissible  capacitance  and  inductance 

When  the  resultant  characteristic  for  the  combination  circuit  has  been  determined  as  detailed 
in  C.3.1  above,  the  next  step  is  analysis  of  the  intrinsic  safety.  For  this  purpose,  the  diagrams 
given  in  Figures  C.7  and  C.8  are  to  be  used.  They  show  the  permissible  limit  curve  for  linear 
source  characteristics  (dotted  limit  curve)  and  for  rectangular  characteristics  (solid  limit 
curve),  with  a  given  inductance  and  the  new  maximum  values  of  current  and  voltage  in  the 
combined  circuit.  Further,  curves  are  given  to  determine  the  highest  permissible  external 
capacitance  for  both  cases.  Table  C.2  gives  an  overview. 
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Table  C.2  -  Assignment  of  diagrams  to  apparatus  groups  and  inductances 


Figure 

Group 

Permissible  inductance  L9 

Figure  C.7a) 

0,15  mH 

Figure  C.7b) 

0.5  mH 

Figure  C.7c) 

I1C 

1  mH 

Figure  C.7d) 

2mH 

Figure  C.7e) 

SmH 

Figure  C.8a) 

0,15  mH 

Figure  C.8b) 

0,5  mH 

Figure  C.8c) 

IIB 

1  mH 

Figure  C.8d) 

2mH 

Figure  C.8e) 

SmH 

To  assess  the  intrinsic  safety,  first  select  the  explosion  group  and  then  the  total  inductance 
required  for  the  combination.  If  only  small  inductances  (that  is  no  lumped  inductances,  only 
short  cable  lengths)  are  concerned,  then  the  diagram  with  the  lowest  inductance  should  be 
selected  (i.e.  Figure  C.7a)  for  Group  IIC  and  Figure  C.8a)  for  Group  IIB), 

The  resultant  output  characteristic  is  then  in  the  diagram  concerned.  If,  in  accordance  with 
C.3.1  current  and  voltage  additions  are  considered,  then  both  resultant  characteristics  shall 
be  plotted. 

It  is  now  possible  to  determine  directly  whether  the  combination  of  sources  together  with  the 
inductance  for  that  diagram  and  the  selected  explosion  group  is  intrinsically  safe.  The 
resultant  sum  characteristic  shall  not  intersect  the  limit  curve  for  the  rectangular  source  in  the 
diagram  at  any  point.  In  addition,  the  point  in  the  diagram  defined  by  the  maximum  voltage 
and  the  maximum  current  of  the  sum  characteristic  shall  be  below  the  curve  for  the  linear 
source. 

The  maximum  permissible  capacitance  of  the  resulting  circuit  is  found  as  the  lowest  value 
from  the  two  C0  limit  curve  families,  being  the  highest  C0  value  that  is  not  intersected  by  the 
resultant  output  characteristic  for  the  linear  limit  and  for  the  rectangular  limit.  If  a  higher 
permissible  capacitance  C0  is  required  for  the  purpose  of  an  application,  then  this  can  be 
obtained  by  starting  with  a  diagram  for  a  lower  inductance.  The  same  approach  can  also  be 
used  where  the  resultant  output  characteristic  intersects  the  curve  for  the  inductive  limit  of  the 
linear  or  rectangular  source.  If,  even  for  the  smallest  inductance  value  in  the  diagrams 
(0,15  mH),  the  relevant  limit  curve(s)  is  exceeded  in  the  IIC  diagram,  then  the  use  of  the  IIB 
diagrams  is  recommended.  If  these  limits  are  also  exceeded,  then  the  combination  is  not 
intrinsically  safe  for  explosion  Group  IIB  either. 

C.3.3    Supplementary  comments  about  the  procedure  using  output  characteristics 

The  procedure  described  above  in  C.3.1  and  C.3.2  for  the  safety  assessment  of  inter- 
connections of  intrinsically  safe  circuits  is  based  on  fundamental  research  work  and  model 
calculations.  The  actual  calculation  method  gives  results  differing  from  those  in  former  report. 
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In  future,  somewhat  larger  capacitances  are  permissible  in  the  small  voltage  range.  For  higher 
voltages  the  difference  can  be  up  to  a  factor  of  3.  In  contrast  to  the  diagrams  in  a  former 
report,  the  limit  curve  for  the  purely  resistive  circuit  is  omitted  in  Figures  C.7  and  C.8;  but  it  is 
inherently  established  through  the  inductive  limits.  Further,  the  limit  curves  for  linear  sources 
were  inserted  here.  Apart  from  this,  tne  graphic  process  remains  the  same  in  general. 

The  graphic  method  is  based  upon  a  reduction  of  the  actual  source  characteristic  in 
abstracted  linear  as  well  as  rectangular  sources  and  comparison  with  the  associated  limit 
curves.  Only  in  the  case  where  the  actual  source  characteristic  is  either  linear  or  rectangular 
can  the  safety  factor  be  derived  from  the  diagram  with  a  guarantee  to  be  exactly  1,5.  In  some 
of  the  more  complex  sources,  it  may  be  of  benefit  to  construct  an  enveloping  linear  or 
rectangular  characteristic  and  the  safety  factor  is  preserved.  If  both  limit  criteria  are  made  use 
of,  the  actual  safety  factor  can  be  slightly  smaller  (always  greater  than  1  however).  This  is  a 
result  of  the  reduction  of  the  actual  circuit  conditions  used  in  this  simple  graphic  method. 
General  expert  opinion  indicates  that  this  is  acceptable  when  considering  zone  1  installations. 

When  using  the  diagrams  given  in  Figures  C.7  and  C.8,  the  interaction  of  inductance  and 
capacitance  (mixed  circuit)  is  always  covered.  The  procedure  should  be  used  also  for  the 
combination  of  purely  linear  circuits  (output  characteristic  in  accordance  with  Figure  C.1a). 
The  method  specified  does  not  distinguish  between  lumped  inductances  or  capacitances  and 
those  derived  from  distributed  cable  parameters.  When  cables  with  transmission  times  of  up 
to  10  us  occur,  then  the  current  view  is  that  there  is  no  need  for  this  difference.  The 
calculation  based  on  concentrated  elements  lies  on  the  safe  side  and  does  not,  in  contrast  to 
earlier  calculation  methods,  cause  severe  limitation  in  practice. 

The  advantage  of  this  procedure  is  that  all  information  relating  to  safety  data  can  be  taken 
from  a  single  diagram.  Nevertheless,  an  additional  comparison  of  the  maximum  open-circuit 
voltage  with  the  maximum  capacitance  according  to  Table  A.2  in  IEC  60079-11  should  be 
made,  because  in  certain  cases  the  procedure  described  here  gives  a  higher  permissible 
capacitance.  The  values  shall  then  be  taken  from  IEC  60079-11  because  misunderstandings 
can  arise  otherwise. 

The  values  obtained  for  the  maximum  permissible  external  inductance  and  capacitance  are 
those  for  the  total  combination,  that  is  the  inductances  and  capacitances  of  all  the  individual 
devices,  which  are  effective  at  the  external  terminals,  shall  be  considered. 

The  calculation  procedure  used  for  the  diagrams  shows  no  significant  systematic  deviations 
from  the  results  obtained  from  the  ignition  tests  during  the  research  projects.  It  is  known  that 
the  numerous  experimental  results  have  an  uncertainty  in  the  range  of  10  %.  The  reason  for 
this  is  the  test  method  and  the  spark  test  apparatus  itself.  The  method  presented  here  is  not 
estimated  to  have  greater  deviations. 

C.4      Illustration  of  the  procedure  using  output  characteristics 
by  means  of  an  example 

In  the  example  shown  in  Figure  C.4,  an  analyser  with  an  amplifier  is  located  inside  the 
hazardous  area  and  supplied  by  an  intrinsically  safe  power  supply  (I).  The  intrinsically  safe 
amplifier  output  signal  (0  ...  20  mA  signal)  is  fed  to  a  display  (II)  and  a  plotter  (III). 
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N      4 
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IV 


EEx  ib  HB 


Current/voltage  addition 
interconnected  circuit  Ex  ib  HB 

P0  =  1 ,9  W,  U0  =  28.7  V,  /0  =  264  mA 

L0  =  0,5  mH,  C0  =  400  nF 


Key 

1  control  room 

2  switch  room 

3  field  (hazardous  area) 

4  display  operationally  passive  maximum  values: 
12  V.  1 33  mA.  0,4  W  linear  characteristics 


5  recorder  operationally  passive  maximum  values: 
1  V,  31  mA,  10  mW  linear  characteristic 

6  power  supply  maximum  values;  Ex  ib  l!B  15,7  V, 
100  mA,  1,57  W,  L0  £  1  mH,  C0  £  650  nF  electronic 
current  regulation  rectangular  characteristic 

7  analyser  with  amplifier  (intrinsically  safe  apparatus) 


Figure  C.4  -  Example  of  an  interconnection 

The  analyser  is  an  intrinsically  safe  apparatus;  the  power  supply,  the  display  and  the  plotter 
are  associated  apparatus  within  the  meaning  of  IEC  60079-11.  In  normal  operation,  only  the 
mains  supply  is  effective  as  an  active  source,  whilst  display  and  plotter  are  passive.  For 
safety  analysis  however,  the  highest  possible  values  are  taken  as  a  basis  which  are  found  in 
the  test  certificates  for  the  three  devices  when  in  a  fault  condition. 

The  following  information  is  available. 

I      Power  supply 

Output  with  type  of  protection  Ex  ib  IIB 

Maximum  values 

U0  =  15,7  V 

/0  =  100  mA 

P0  =  1,57  W 

i0  =  1mH 

C0  =  650  nF 

Rectangular  output  characteristic  (Figure  C.1c)) 
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II.  Display 

Input  with  type  of  protection  Ex  ib  IIC 

Maximum  values 

U0  =  12  V 

/0  =  133  mA 

PQ  =  0,4  W 

L0  =  1,8  mH 

C0  =  1,4uF 

Linear  output  characteristic  (Figure  C.1a)) 

III.  Plotter 

Input  with  type  of  protection  Ex  ib  IIC 

Maximum  values 

£/0=1  V 

/0  =  31  mA 

Po=10mW 

L0  =  36  mH 

C0  =  200  uF 

Linear  output  characteristic  (Figure  C.1a)) 

With  the  circuit  arrangement  in  Figure  C.4,  and  depending  on  the  fault  conditions  in  the 
analyser,  voltages  or  currents  can  be  added  as  in  Figure  C.2e).  The  individual  characteristics 
and  the  two  sum  characteristics  for  voltage  and  current  addition  are  shown  in  Figure  C.5. 
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Figure  p.5  -  Sum  characteristics  for  the  circuit  as  given  in  Figure  C.4 
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In  order  to  check  the  intrinsic  safety,  the  two  sum  characteristics  are  drawn  in  Figure  C.8b) 
(explosion  Group  IIB,  L  =  0,5  mH)  (Figures  C.6a)  and  C.6b)). 

The  corner  point  at  18,7  V  and  1CC  mA  in  the  voltage  addition  curve  obviously  is  the  critical 
point  -  it  is  nearest  to  the  inductive  limit  of  the  rectangular  source,  but  does  not  reach  it. 
At  this  point  the  theoretically  highest  power  of  1,9  W  is  reached. 

Since  both  resultant  characteristics  of  the  combination  do  not  intersect  the  inductive  limit 
curves  for  the  linear  and  rectangular  sources  in  Figures  C.6a)  and  C.6b),  the  safety  test  has 
come  out  positively.  For  the  maximum  voltage  (28,7  V)  of  the  resultant  characteristic  in  the 
present  example,  the  maximum  permissible  capacitance  of  the  combination  from  the  family  of 
curves  in  Figure  C.6b)  can  be  read  off  to  be  400  nF.  If  Table  A.2  of  IEC  60079-11  is  checked 
for  the  value  28,7  V  Group  IIB,  the  permissible  value  of  capacitance  is  618  nF  -  higher  than 
the  value  of  400  nF  established  here. 
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Figure  C.6  -  Current  and/or  voltage  addition  for  the  example  given  in  Figure  C.4 
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The  resultant  values  for  the  combination  are  as  follows: 

Explosion  Group  118 

Maximum  values 

U0  =  28,7  V 

/0   =  264  mA 

P0  =  1,9  W 

L0  =  0,5  mH 

C0  =  400  nF 

Because,  in  the  present  example,  the  associated  apparatus  (power  supply,  display  and 
plotter)  have  no  effective  inductance  or  capacitance  values  at  the  intrinsically  safe 
inputs/outputs,  the  maximum  values  for  capacitance  and  inductance  may  be  used  for  the 
intrinsically  safe  apparatus  (analyser)  and  for  the  interconnection  cables. 

C.5      Summary 

In  the  design  and  construction  of  measuring  and  process  plant  in  the  chemical  and 
petrochemical  industries,  it  is  frequently  necessary  to  combine  several  certified  pieces  of 
apparatus  with  intrinsically  safe  circuits. 

The  installation  rules  of  IEC  60079-14  permit  the  designer,  constructor  or  operator  of  an 
electric  installation  in  a  hazardous  area  to  handle  such  combinations  at  his  own  responsibility 
if  a  calculated  or  measured  proof  of  the  safety  of  the  interconnection  is  carried  out.  Since 
the  operator  has,  generally,  no  facility  for  a  measured  proof  (the  required  equipment  is 
not  available  to  the  operator),  the  operator  is  left  with  a  suitable  calculation  procedure. 
IEC  60079-14  has  up  to  now  provided  only  a  procedure  that  can  be  used  exclusively  for 
sources  with  purely  linear  internal  resistance  and  even  this  does  not  always  result  in  safe 
configurations.  In  practice  however,  sources  with  non-linear  characteristic  occur  frequently, 
and  up  till  now  the  combination  of  these  were  only  possible  with  the  support  of  a  testing 
station. 

A  method  was  therefore  developed  which  permits  the  safety  assessment  of  the  combination  of 
networks  with  linear  and  non-linear  circuits  to  be  performed  by  means  of  diagrams.  The 
procedure  described  here  is  applicable  to  explosion  Groups  MB  and  IIC  and  for  hazardous 
area  zone  1. 

The  basic  part  of  the  procedure  is  the  graphical  summation  of  the  output  characteristics  of  the 
intrinsically  safe  sources  involved.  The  resultant  characteristics  are  then  plotted  in  a  suitable 
diagram  from  which  the  intrinsic  safety  of  the  resistive,  inductive,  capacitive  and  combined 
circuits  can  be  assessed  (that  is  with  a  simultaneous  inductive  and  capacitive  load). 
A  significant  advantage  of  this  procedure  is  that  all  information  and  boundary  conditions 
relating  to  the  safety  data  can  be  taken  from  just  one  diagram.  The  required  safety  factor 
of  1,5  is  already  incorporated  into  the  diagrams. 

C.6      Diagrams 

The  diagram  in  Figure  C.9  is  included  so  that  it  may  be  used  for  copying  onto  a  transparency. 
The  self-calculated  diagrams  for  voltage  sum  or  current  sum  then  can  be  drawn  and  laid 
upon  the  different  limit  diagrams  (common  scale  versions)  for  assessment.  On  the  following 
pages  the  limit  diagrams  according  to  Table  C.2  are  given  both  in  a  common  scale  and  in 
optimized  scale. 
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Figure  C.7a)  -  Diagram  for  0,15  mH 
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Figure  C.7a)  -  Diagram  for  0,15  mH  {continued) 
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Figure  C.7b)  -  Diagram  for  0,5  mH  (continued) 


34 


IS/IEC  60079-25  :  2003 


un  v 


50  nF 


70  nF 


100  nF 

150  nF 
200  nF 

300  nF 
500  nF 

1|iF 

2fiF 

5>iF 
10  uF 


Af\      — r 

1 

*HJ 

\ 

l 
\ 

> 
\ 

> 

IIC;  1  mH 

t 

> 

\ 

\ 

\ 

\ 

\ 

\ 

N 

\ 

< 

\ 

\ 

\ 

VI     — 

I 

, 

V 

%-»■ 

\ 

^ 

s 

> 

t 

< 

\ 

,"V, 

V 

\ 

\ 

■"*•. 

**, 

* 

^ 

1 

*» 

*» 

\ 

V 

25 

"*>, 

N 

\ 

ys 

t   ^^^ 

\ 

\ 

— * 

ot\ 

^ 

— 

-^. 

> 

\ 

^ 

^~ 

S 

< 

s 

^S 

\ 

— 

__ _ 

V 

> 

1 

V 

— 

— 

\ 

— 

— - 

^^ 

\ 

-^. 

, 

1U    ■ 

-= 

•*™ 

D 

._ 

— 

zz. 

*2Z. 

^ 

0 

I 

50 


100 


150 


200 


L   mA 


Key 

1  inductive  limit  for  rectangular  source 

2  inductive  limit  for  linear  source 


Figure  C.7c)  -  Diagram  for  1  mH 
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Figure  C.7c)  -  Diagram  for  1  mH  (continued) 
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Figure  C.7d)  -  Diagram  for  2  mH 
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Figure  C.7d)  -  Diagram  for  2  mH  (continued) 
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Figure  C.7e)  -  Diagram  for  5  mH 
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Figure  C.7e)  -  Diagram  for  5  mH  (continued) 
Figure  C.7  -  Limit  curve  diagram  for  universal  source  characteristic  -  Group  IIC 
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Figure  C.8a)  -  Diagram  for  0,15  mH 


41 


IS/IEC  60079-25  :  2003 


300  nF 

500  nF 


40  -| 

\ 

I     I 

v  - 

■   I      -I   - 1 

MB;  0,15  mh 

"  •*■" 

— 

\ 

\ 

\     ~ 

"V>  - 

A_ 

\ 

"^ 

t 

_ 

s 

^  - 

r  "™* 

__ 

^ 

30  - 

.  > 

s. 

"■>*. 

"  I 

'*•"-. 

l^*-«. 

Z3 

.  . 

1 

■ 

"  ~"~  — .  . 

20 

-»-^- 

^™' 

j 

1b  - 



10  - 

—^_ 

— 

— 



W—A 

-rr-i 

-  — 

«i 

o- 

I 1 — 

I 

1  uF 


2nF         »s 


5^F  » 


10  pF 


100 


200 


300 


400  500 

/„    mA 


Key 

1  inductive  limit  for  rectangular  source 

2  inductive  iimit  for  linear  source 


Figure  C.8a)  -  Diagram  for  0,15  mH  (continued) 
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Figure  C.8b)  -  Diagram  for  0,5  mH 
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Figure  C.8b)  -  Diagram  for  0,5  mH  (continued) 
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Figure  C.8c)  -  Diagram  for  1  mH 
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Figure  C.8c)  -  Diagram  Tor  1  mH  (continued) 
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Figure  C.8d)  -  Diagram  for  2  mH 
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Figure  C.8d)  -  Diagram  for  2  mH  (continued) 
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Figure  C.8e)  -  Diagram  for  5  mH 
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1  inductive  limit  for  rectangular  source 
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Figure  C.8e)  -  Diagram  for  5  mH  (continued) 

Figure  C.8  -  Limit  curve  diagram  for  universal  source  characteristic  -  Group  IIB 
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Annex  D 

(normative) 

Verification  of  inductive  parameters 


Figure  D.1  illustrates  the  system  being  analysed. 

.Rj  is  the  inherent  resistance  of  the  inductive  coil.  If  the  coil  resistance  is  supplemented  by  an 
additional  resistor,  then  that  resistor  shall  meet  the  criteria  of  an  infallible  resistor. 

R0  is  the  output  resistance  of  the  linear  source  of  power,  that  is  UQII0. 

If  £j  is  less  than  L0,  then  the  permitted  inductance  of  the  cable  may  be  taken,  as  the 
difference  between  the  two  values  and  the  system  is  acceptable. 

If  Lj/i?j  is  less  than  the  permitted  LQIR0  of  the  power  source,  then  the  system  is  acceptable  and 
the  permitted  L/R  ratio  of  the  cable  remains  L0/R0. 

NOTE  Where  a  power  supply  uses  the  lowest  value  of  current-limiting  resistor  permitted  by  Table  A.1  of 
IEC  60079-11,  then  there  is  no  permitted  inductance  for  a  cable  without  taking  into  consideration  the  cable 
resistance,  and  L0  equals  zero. 

If  the  inductive  apparatus  does  not  meet  either  of  these  two  requirements,  then  a  more 
extensive  analysis  should  be  undertaken  as  follows. 

Determine  the  current,  which  flows  through  the  inductance.  In  the  circuit  illustrated,  this  is 

Multiply  this  current  by  1,5  and  use  the  inductive  curves  in  IEC  60079-11  appropriate  to  the 
required  apparatus  group  to  determine  the  maximum  permitted  inductance  Lmax. 

If  Z-max  is  less  than  the  inductance  of  the  coil  Lh  then  the  circuit  is  not  acceptable. 

If  Lmax  is  greater  than  Lx  then  the  permitted  cable  inductance  Lc  is  the  smaller  of  the  two 
values  (Lmax  -  Lt)  or  L0. 

If  required,  maximum  inductance  to  resistance  ratio  of  the  cable  {Lc/Rc),  which  may  be 
connected  in  the  system,  shall  be  calculated  using  the  following  formula.  This  formula  takes 
account  of  a  1,5  factor  of  safety  on  current  and  shall  not  be  used  where  Ct  for  the  output 
terminals  of  the  apparatus  exceeds  1  %  of  C0. 

Lc  __BeR  +  (642t*R2~72UJeL/2    ^H/Q 


#c  4.5U, 


where 

e     is  the  minimum  spark-test  apparatus  ignition  energy  in  microjoules,  and  is  for 

•  Group  I  apparatus:        525  \l*1, 

•  Group  IIA  apparatus:    320  u. J, 

•  Group  MB  apparatus:    160  |xj, 
«     Group  IIC  apparatus:     40  uJ; 
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R    is  the  total  circuit  resistance  {R0  +  R,),  in  ohms; 

U0  is  the  maximum  open  circuit  voltage,  in  volts; 

L     is  the  total  circuit  inductance  (L{  +  internal  inductance  of  power  source)  in  henries; 

The  permitted  LCIRC  ratio  of  the  system  cable  is  whichever  is  the  smaller  of  this  calculated 
value  and  the  L0/R0  ratio  of  the  source  of  power. 

NOTE    In  determining  the  temperature  classification  of  such  an  inductor,  the  assumption  is  made  that  the  coil 
resistance  fails  to  the  value  permitting  maximum  power  transfer. 


HAZARDOUS  AREA 


NON  HAZARDOUS  AREA 


Key 

1  associated  apparatus 

2  parameters  of  inductance 


Figure  D.1  -Typical  inductive  circuit 
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Annex  E 

(informative) 

A  possible  format  for  descriptive  systems  drawings 
and  installation  drawings 


This  annex  is  intended  to  illustrate  the  information  that  is  considered  desirable  in  preparing 
descriptive  system  drawings  and  installation  drawings.  It  is  not  intended  to  promote  a 
particular  format  for  these  drawings  or  suggest  that  other  methods  of  storing  the  information 
cannot  be  equally  effective.  The  example  illustrated  was  deliberately  chosen  because  of  its 
complexity  and  illustrates  almost  all  facets  of  system  design.  The  majority  of  applications  are 
much  simpler  than  this  and  comprise  a  single  transmitter  and  interface. 

The  block  diagram  contains  all  the  information  necessary  to  confirm  the  status  of  the  system, 
and  to  make  possible  the  analysis  described  in  Annexes  A  and  B.  The  note  on  the  RTD 
confirms  that  it  is  simple  apparatus  and  that  its  temperature  classification  is  determined  by  the 
local  process  temperature.  The  failure  to  comply  with  the  500  V  insulation  test  means  that  it  is 
regarded  as  being  earthed  at  the  point  and  hence  relies  on  the  galvanic  isolation  within  the 
transmitter  to  satisfy  the  requirement  of  the  circuit  being  earthed  at  one  point  only. 

The  transmitter  is  certified  apparatus  and  has  safety  parameters  specified  for  both  the  RTD 
input  connections  and  the  4  mA  to  20  mA  output  connections.  The  input  capacitance 
marginally  changes  the  permitted  cable  capacitance,  and  the  permitted  ambient  temperature 
range  ensures  that  the  transmitter  is  suitable  for  plant  mounting  in  most  locations. 

The  gaivanically  isolated  interface  has  well-defined  output  parameters  which  are  used  to 
determine  the  permitted  cable  parameters.  The  restrictive  cable  parameter  is  the  80  nF  cable 
capacitance,  which  is  highlighted  in  the  note  under  the  document  number.  The  alternative 
parameter  in  Group  MB  is  given  since  this  might  be  more  relevant  to  a  particular  application. 

The  installation  drawing  is  intended  to  convert  the  descriptive  system  drawing  to  the 
requirements  of  a  particular  installation.  The  assumption  is  made  that  the  installing  technician 
requires  the  information  necessary  to  create  an  installation,  which  has  already  been  correctly 
designed.  The  technician  would  only  need  access  to  the  descriptive  system  drawing  if  he  had 
some  reason  to  doubt  the  adequacy  of  the  installation.  The  installation  drawing  adds  the 
junction  box,  which  is  simple  apparatus  and  specifies  the  particular  cables  and  glands  to  be 
used.  In  this  case  they  are  agreed  company  standards  complying  with  the  relevant 
requirements.  The  temperature  classification  of  the  RTD  is  clarified  and  specific  instructions 
on  the  bonding  of  the  cable  screens  are  given.  The  level  of  information  on  this  drawing  should 
be  adequate  to  permit  subsequent  inspections  to  be  carried  out. 

It  is  important  to  reiterate  that  this  annex  illustrates  only  one  method  of  presenting  this 
information.  The  essential  requirement  is  that  the  descriptive  system  document  contains  all 
the  information,  which  enables  an  adequately  safe  system  to  be  created.  The  installation 
document  should  contain  the  necessary  information  to  enable  a  particular  embodiment  of  that 
system  to  be  safely  installed  in  a  specific  location. 
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Figure  E.1  -  Typical  block  diagram  for  IS  system  descriptive  system  document 
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Figure  E.2  -  Typical  installation  drawing  for  IS  system 
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Annex  F 

(informative) 

Surge  protection  of  an  intrinsically  safe  circuit 


F.1       General 

This  annex  illustrates  a  possible  technique  for  protecting  an  intrinsically  safe  circuit  from  the 
surges  induced  by  a  nearby  lightning  strike.  This  type  of  protection  is  only  applied  when  a  risk 
analysis  of  the  probability  of  a  lightning  strike  and  the  consequences  of  such  an  event  shows 
it  to  be  necessary.  The  example  is  intended  to  demonstrate  the  necessary  analysis;  it  is  not 
the  only  possible  solution. 

F.2      Installation  to  be  protected 

Figure  F.1  illustrates  a  typical  installation  where  the  neutral  is  directly  connected  to  an  earth 
mat.  Other  bonding  techniques  are  equally  acceptable.  The  temperature-sensing  element 
penetrates  the  Faraday  cage  of  a  storage  tank  containing  a  flammable  material.  The  sensing 
element  resistance  is  converted  to  4  mA  to  20  mA  by  a  converter  with  internal  isolation.  This 
current  is  then  fed  into  the  computer-input  network  via  a  galvanic  isolator.  The  combination  of 
isolator,  converter  and  the  sensing  element  needs  to  be  analysed  as  being  an  intrinsically 
safe  system  and  is  the  system  analysed  in  Annex  E. 

F.3      Lightning  induced  surges 

One  possible  scenario  is  lightning  striking  the  tank  at  point  X  and  the  resultant  current  being 
dispersed  via  the  foundations  of  the  tank  and  the  equipotential  bonding  of  the  installation. 
A  transient  voltage  (typically  60  kV)  would  be  developed  between  the  tank  top  (X)  and  the 
bonding  point  of  the  computer  '0'  volt  (Y).  The  transient  voltage  would  cause  breakdowns  of 
the  galvanic  isolator  and  the  converter  isolation  and  could  create  a  side  flash  within  the 
vapour  space  of  the  tank  with  a  high  probability  of  an  explosion. 

F.4      Preventive  measures 

A  surge  suppresser  can  be  mounted  on  the  tank  to  protect  the  transmitter  segregation  thus 
preventing  a  potential  difference  within  the  tank.  The  surge  suppresser  is  bonded  to  the  tank 
to  preserve  the  Faraday  cage.  The  multi-element  surge  suppresser  restricts  the  voltage 
excursion  (60  V)  to  a  level  which  can  readily  be  absorbed  by  the  transmitter  isolation. 

A  second  surge  arrester  is  necessary  to  prevent  the  galvanic  isolator  and  computer  input 
circuits  being  damaged.  This  surge  suppresser  would  normally  be  mounted  in  the  safe  area 
and  connected  as  indicated.  The  resultant  common-mode  surge  on  the  isolator  would  not 
overstress  the  isolation  within  the  galvanic  isolator. 

The  system  is  not  intrinsically  safe  during  the  transient  voltage  but  the  high  currents  and 
voltages  are  removed  from  the  highest  hazard  location  within  the  tank  and  are  present  in  the 
relatively  secure  location  of  the  interconnecting  cables. 
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The  system  is  indirectly  earthed  (bonded)  at  two  places  and  during  the  transient  period  the 
circulating  current  flowing  is  incendive.  However,  in  normal  operation  the  indirect  earths  are 
non  conducting  and  require  a  relatively  high  voltage  (120  V)  between  the  bonding  connections 
of  the  surge  suppression  networks  for  any  significant  current  to  flow.  Such  a  voltage  should 
not  exist  for  any  significant  time  and  hence  the  circuits  are  adequately  safe. 

F.5      Supporting  documentation 

The  descriptive  system  document  should  be  modified  to  include  the  surge  suppression 
networks  fitted.  Their  effect  in  normal  operation  needs  to  be  analysed  taking  into  account  their 
relevant  characteristics,  which  may  include  small  values  of  capacitance  and  inductance. 

The  indirect  earthing  in  two  places  should  be  recorded  and  analysed  and  an  argument  of 
acceptability  presented. 

F.6      Further  protection 

Where  lightning  is  recognized  as  a  significant  problem,  consideration  should  be  given  to  fitting 
surge  suppression  to  the  mains  supply  to  the  instrumentation  system.  Mains  borne  surges 
could  damage  the  galvanic  isolators  from  the  power  supply  or  signal  connections.  Some 
degree  of  immunity  is  implicit  in  the  normal  requirements  of  compliance  with  EMC  standards 
but  this  is  not  adequate  against  most  lightning  induced  surges. 

Similarly,  the  other  possible  invasion  route  along  network  interconnections  requires  some 
degree  of  surge  protection. 
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Key 

1  converter  5 

2  surge  suppressor  6 

3  bonding  strap  7 

4  mains  supply  8 

Figure  F.1  -  Surge  protection  requirements  of  an  instrument  loop 
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